Encrypt data from users in web applications

Question

Some web applications, such as Google Docs, store user-created data. Data that can only be read by its owner. Or maybe not?

As far as I know, this data is stored as in a remote database. Thus, if someone with sufficient privileges on the remote system (for example, sysadmin) can hide my data, my privacy may be compromised.

What could be the best solution for storing data encrypted in a remote database, and that only the data owner can decrypt it? How to make this process transparent to the user? (You cannot use the user's password as a key to encrypt your data, because you do not need to know his password).

Answer 1

If encryption / decryption is performed on the server, you cannot make sure that the text is not dumped somewhere in any log file or the like.

You need to do encryption / decryption inside the browser using JavaScript / Java / ActiveX or whatever. As a user, you need to trust the client side of the web service so that you do not send back information that is not encrypted to the server.

Charles

Answer 2

, , , -, - // , , . , , , SSL, , " , ?".

Answer 3

, , Amazons AWS. , . . . / .

: - (: ), . , . .

, , GPG/PGP .., , - - , .

edit @Carl Unkwntech : , . , - ...; -)

Answer 4

Auron : / ? ?

, , . , . , , - , , - , , , .

Crypto ;-) AxCrypt Xecrets 'off-line .

Answer 5

, , . Google , .